[ 34.494612] audit: type=1800 audit(1545822700.010:27): pid=7464 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 34.516031] audit: type=1800 audit(1545822700.010:28): pid=7464 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 35.069067] audit: type=1800 audit(1545822700.640:29): pid=7464 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 35.088719] audit: type=1800 audit(1545822700.640:30): pid=7464 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.80' (ECDSA) to the list of known hosts. RTNETLINK answers: No buffer space available RTNETLINK answers: No buffer space available syzkaller login: [ 61.151334] IPVS: ftp: loaded support on port[0] = 21 [ 61.295146] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.302216] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.309323] device bridge_slave_0 entered promiscuous mode [ 61.325826] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.332379] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.339781] device bridge_slave_1 entered promiscuous mode [ 61.355632] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 61.373016] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 61.417012] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 61.436169] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 61.501689] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 61.509418] team0: Port device team_slave_0 added [ 61.524129] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 61.531181] team0: Port device team_slave_1 added [ 61.547143] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.568954] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.586262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.604777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready RTNETLINK answers: Operation not supported RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported [ 61.733658] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.740411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.747326] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.753692] bridge0: port 1(bridge_slave_0) entered forwarding state RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument [ 62.227921] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 62.234279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.240668] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 62.289210] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 62.338235] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 62.344643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.351490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.401022] 8021q: adding VLAN 0 to HW filter on device team0 executing program [ 62.660308] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 62.668134] device bridge_slave_0 left promiscuous mode [ 62.674062] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.696950] device bridge_slave_1 left promiscuous mode [ 62.702545] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.755442] bond0: Releasing backup interface bond_slave_0 [ 62.805309] bond0: Releasing backup interface bond_slave_1 [ 62.857139] team0: Port device team_slave_0 removed [ 62.864102] team0: Port device team_slave_1 removed [ 62.874243] netlink: 'syz-executor747': attribute type 3 has an invalid length. [ 62.881839] netlink: 'syz-executor747': attribute type 3 has an invalid length. [ 62.889385] netlink: 'syz-executor747': attribute type 3 has an invalid length. [ 62.896893] netlink: 'syz-executor747': attribute type 3 has an invalid length. [ 62.904761] team0: Mode changed to "activebackup" [ 62.909615] kasan: CONFIG_KASAN_INLINE enabled [ 62.914421] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 62.921786] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 62.927997] CPU: 1 PID: 7619 Comm: syz-executor747 Not tainted 4.20.0-rc7-next-20181224 #188 [ 62.936567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 62.946081] RIP: 0010:team_nl_cmd_options_set+0xa2d/0x1370 [ 62.951689] Code: 8b 74 24 38 75 13 e9 eb 05 00 00 e8 6d 45 df fc 49 39 dc 0f 84 dd 05 00 00 e8 5f 45 df fc 49 8d 7c 24 10 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 0f 85 af 06 00 00 49 8b 44 24 10 4c 8d 60 f0 49 39 [ 62.970692] RSP: 0018:ffff8881d1ee7270 EFLAGS: 00010203 [ 62.976037] RAX: 000000060dac2cae RBX: ffff8881c87bc000 RCX: ffffffff84a2aae7 [ 62.983287] RDX: 0000000000000000 RSI: ffffffff84a2ab61 RDI: 000000306d616574 [ 62.990532] RBP: ffff8881d1ee74d0 R08: ffff8881bac2c280 R09: ffffed103b5a3ef8 [ 62.997777] R10: ffffed103b5a3ef8 R11: ffff8881dad1f7c7 R12: 000000306d616564 [ 63.005285] R13: ffff8881c9309c90 R14: ffff8881d1ee7360 R15: dffffc0000000000 [ 63.012543] FS: 0000000001c05880(0000) GS:ffff8881dad00000(0000) knlGS:0000000000000000 [ 63.020750] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.026614] CR2: 000055a4cf1fa120 CR3: 00000001c655f000 CR4: 00000000001406e0 [ 63.033871] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 63.041124] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 63.048428] Call Trace: [ 63.051015] ? team_nl_cmd_options_get+0x480/0x480 [ 63.055998] ? nla_memcmp+0x90/0x90 [ 63.059611] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 63.065258] ? apparmor_cred_transfer+0x590/0x590 [ 63.070086] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 63.075747] ? cap_capable+0x1f9/0x260 [ 63.079614] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 63.085138] genl_family_rcv_msg+0x8a7/0x11a0 [ 63.089623] ? genl_unregister_family+0x8a0/0x8a0 [ 63.094447] ? lock_downgrade+0x900/0x900 [ 63.098594] ? check_preemption_disabled+0x48/0x280 [ 63.103597] ? kasan_check_read+0x11/0x20 [ 63.107732] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 63.112989] ? rcu_read_unlock_special+0x370/0x370 [ 63.118086] genl_rcv_msg+0xc6/0x168 [ 63.121781] netlink_rcv_skb+0x16c/0x430 [ 63.125820] ? genl_family_rcv_msg+0x11a0/0x11a0 [ 63.130561] ? netlink_ack+0xb70/0xb70 [ 63.134438] ? down_read+0x8d/0x120 [ 63.138050] genl_rcv+0x28/0x40 [ 63.141309] netlink_unicast+0x59f/0x750 [ 63.145442] ? netlink_attachskb+0x9a0/0x9a0 [ 63.149990] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 63.155509] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 63.160511] netlink_sendmsg+0xa18/0xfc0 [ 63.164554] ? netlink_unicast+0x750/0x750 [ 63.168792] ? aa_sock_msg_perm.isra.14+0xba/0x160 [ 63.173699] ? apparmor_socket_sendmsg+0x29/0x30 [ 63.178457] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 63.183980] ? security_socket_sendmsg+0x94/0xc0 [ 63.188845] ? netlink_unicast+0x750/0x750 [ 63.193073] sock_sendmsg+0xd5/0x120 [ 63.196767] ___sys_sendmsg+0x7fd/0x930 [ 63.200735] ? copy_msghdr_from_user+0x580/0x580 [ 63.205468] ? blkcg_maybe_throttle_current+0xa44/0x1380 [ 63.210897] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 63.216196] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 63.221713] ? __fget_light+0x2e9/0x430 [ 63.225666] ? fget_raw+0x20/0x20 [ 63.229105] ? task_work_run+0x1af/0x2a0 [ 63.233151] ? _raw_spin_unlock_irq+0x27/0x80 [ 63.237625] ? _raw_spin_unlock_irq+0x27/0x80 [ 63.242101] ? routing_ioctl+0x890/0x890 [ 63.246146] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 63.251658] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 63.257176] ? sockfd_lookup_light+0xc5/0x160 [ 63.261652] __sys_sendmsg+0x11d/0x280 [ 63.265521] ? __ia32_sys_shutdown+0x80/0x80 [ 63.269911] ? do_syscall_64+0x6be/0x820 [ 63.273950] ? trace_hardirqs_on+0x310/0x310 [ 63.278333] ? do_syscall_64+0x9a/0x820 [ 63.282288] ? do_syscall_64+0x9a/0x820 [ 63.286250] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 63.291674] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 63.297185] ? ksys_ioctl+0x81/0xd0 [ 63.300792] __x64_sys_sendmsg+0x78/0xb0 [ 63.304829] do_syscall_64+0x1b9/0x820 [ 63.308693] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 63.314032] ? syscall_return_slowpath+0x5e0/0x5e0 [ 63.318936] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 63.323757] ? trace_hardirqs_on_caller+0x310/0x310 [ 63.328755] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 63.333750] ? prepare_exit_to_usermode+0x291/0x3b0 [ 63.338744] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 63.343569] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 63.348735] RIP: 0033:0x446f99 [ 63.351911] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb ce fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 63.370787] RSP: 002b:00007fffa5d38548 EFLAGS: 00000213 ORIG_RAX: 000000000000002e [ 63.378471] RAX: ffffffffffffffda RBX: 0000000020000e94 RCX: 0000000000446f99 [ 63.385717] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000004 [ 63.392962] RBP: 00000000004a8cc0 R08: 00000000004a8ce8 R09: 0000000000000100 [ 63.400208] R10: 0000000020000ff8 R11: 0000000000000213 R12: 00000000004a8d60 [ 63.407455] R13: 00000000004043b0 R14: 0000000000000000 R15: 0000000000000000 [ 63.414724] Modules linked in: [ 63.418694] ---[ end trace 3e2fa3570e09a571 ]--- [ 63.423543] RIP: 0010:team_nl_cmd_options_set+0xa2d/0x1370 [ 63.429219] Code: 8b 74 24 38 75 13 e9 eb 05 00 00 e8 6d 45 df fc 49 39 dc 0f 84 dd 05 00 00 e8 5f 45 df fc 49 8d 7c 24 10 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 0f 85 af 06 00 00 49 8b 44 24 10 4c 8d 60 f0 49 39 [ 63.448147] RSP: 0018:ffff8881d1ee7270 EFLAGS: 00010203 [ 63.453529] RAX: 000000060dac2cae RBX: ffff8881c87bc000 RCX: ffffffff84a2aae7 [ 63.460789] RDX: 0000000000000000 RSI: ffffffff84a2ab61 RDI: 000000306d616574 [ 63.468062] RBP: ffff8881d1ee74d0 R08: ffff8881bac2c280 R09: ffffed103b5a3ef8 [ 63.475344] R10: ffffed103b5a3ef8 R11: ffff8881dad1f7c7 R12: 000000306d616564 [ 63.482590] R13: ffff8881c9309c90 R14: ffff8881d1ee7360 R15: dffffc0000000000 [ 63.489861] FS: 0000000001c05880(0000) GS:ffff8881dad00000(0000) knlGS:0000000000000000 [ 63.498089] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.503975] CR2: 000055a4cf1fa120 CR3: 00000001c655f000 CR4: 00000000001406e0 [ 63.511230] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 63.518498] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 63.525768] Kernel panic - not syncing: Fatal exception [ 63.532214] Kernel Offset: disabled [ 63.535834] Rebooting in 86400 seconds..